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DETAILED ACTION 
Response to Amendment 

1. This action is in response to the RCE/amendment filed 11/15/06. 
Claim 25 has been amended. 

Response to Arguments 

2. Applicant's arguments with respect to claim 25 have been considered 
but are not persuasive. Applicant's amendments have necessitated a new 
search and new grounds of rejection. 

Claim Rejections - 35 (JSC §103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis 
for all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a 
whole would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

4. Claim 25 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Mochizuki (7,020,780) in view of Sims, III (6,550,011) and Shear et al. 
(2001/0042043). Mochizuki discloses a method of unlocking a locked file 
stored in mastered pre-recorded portion on a storage medium, wherein both 
a title key and a cipher key are needed to unlock the locked file, the title key 
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and the cipher l<ey being functionally equivalent to a content key and a 
complement key, the mastered pre-recorded portion including the title key 
but not the cipher key, the storage medium also having an writeable area 
that is writable by a storage engine, the method comprising: receiving a 
request from a host device at the storage engine to unlock the locked file; 
providing the storage engine with the cipher key; and writing the cipher key 
to the writeable area to unlock the file (Abstract; figures 6-7, 9; col. 8, lines 
50-66; col. 10, line 26 - col. 11, line 17). 

Mochizuki does not disclose authenticating a host device and 
authenticating the storage engine with a server. Sims discloses a method of 
unlocking locked content stored in a storage medium including the steps of 
authenticating a host device (col. 5, lines 39-59; col. 19, lines 29-49) and 
authenticating the storage engine with a server (col. 17, lines 1-23). It 
would have been obvious to modify the Mochizuki method to authenticate 
the host device and authenticate the storage engine with a server, as taught 
by Sims, in order to verify that the host device and the storage engine are 
both authorized devices, 

Mochizuki discloses that the host device decrypts the file using the key 
provided by the engine. Mochizuki does not disclose that the engines itself 
decrypts the file and then provides the decrypted file content to the host. 
Shear discloses a secure storage engine (i.e., a disk drive) which decrypts 
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file content and provides tlie decrypted file content to the host wherein 
decryption keys are never exposed outside of the engine (fig. 4A; 
paragraphs 0081, 0219, 0250-0252). It would have been obvious to modify 
the Mochizuki method to such that the engines is a secure engine which 
decrypts the file and provides the decrypted file content to the host but does 
not expose the decryption keys outside of the engine, as taught by Shears, 
in order to provide an additional security layer. 

5. Claim 26 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Mochizuki in view of Sims and Shear as applied to claim 25 above, and 
further in view of Menezes et al ("Handbook of Applied Cryptography"). 
Sims discloses authenticating the host device requiring two passes (I.e., two 
messages to be transmitted), but Sims does not disclose using one-pass 
protocol in which a first entity who generates the random session key is also 
the entity that encrypts the session key with a second entity's public key and 
transmits the encrypted session key to the second entity participating In a 
communication session. Menezes discloses using one-pass protocol for 
transporting a session key and for implicit key authentication (Section 
12.5.1, page 507-508). It would have been obvious to modify the combined 
method of Mochizuki, Sims and Shear to authenticate the host device using 
one-pass protocol, as taught by Menezes, in order to reduce network traffic. 
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Conclusion 

6. The prior art made of record and not relied upon Is considered 
pertinent to applicant's disclosure. 

U.S. Patent No. 5,991,399 to Graunke et al. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Minh Dinh whose telephone number 
Is 571-272-3802. The examiner can normally be reached on Mon-Fri: 
10:00am-6:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Gilberto Barron can be reached on 571-272-3799. 
The fax phone number for the organization where this application or 
proceeding is assigned Is 571-273-8300. 
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Information regarding the status of an application may be obtained 
from the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either Private 
PAIR or Public PAIR. Status information for unpublished applications is 
available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business Center 
(EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272- 
1000. 
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